Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-4104

Опубликовано: 17 июл. 2020
Источник: nvd
CVSS3: 5.4
CVSS2: 3.5
EPSS Низкий

Описание

HCL BigFix WebUI is vulnerable to stored cross-site scripting (XSS) within the Apps->Software module. An attacker can use XSS to send a malicious script to an unsuspecting user. This affects all versions prior to latest releases as specified in https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080855&sys_kb_id=971d99ed1b8ed01c086dcbfc0a4bcb6a.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:hcltech:bigfix_webui:-:*:*:*:*:*:*:*

EPSS

Процентиль: 56%
0.00343
Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

github
больше 3 лет назад

HCL BigFix WebUI is vulnerable to stored cross-site scripting (XSS) within the Apps->Software module. An attacker can use XSS to send a malicious script to an unsuspecting user. This affects all versions prior to latest releases as specified in https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080855&sys_kb_id=971d99ed1b8ed01c086dcbfc0a4bcb6a.

EPSS

Процентиль: 56%
0.00343
Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79